CVE-2024-37505 — WordPress Business One Page theme <= 1.2.9 - Broken Access Control on Notice Dismissal vulnerability

CVE-2024-37505

WordPress Business One Page theme <= 1.2.9 - Broken Access Control on Notice Dismissal vulnerability PUBLISHED

Description (CNA)

Missing Authorization vulnerability in Rara Themes Business One Page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business One Page: from n/a through 1.2.9.

Affected (CNA)

Vendor / product	Versions
Rara Themes / Business One Page	affected n/a through 1.2.9

CWE

CWE-862

References

https://patchstack.com/database/vulnerability/business-one-page/wordpress-business-one-page-theme-1-2-9-broken-access-control-on-notice-dismissal-vulnerability?_s_id=cve

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.